Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
File:                     mvGIoEu0XU7nTETcdtcf_73AT2A.mft (raw, json)
Hash identifier:          doOKEKzIOOaiC6eYV8qsXQkZAoSyQd57IG54Op8QgUE=
Subject key identifier:   90:F2:F2:65:36:E3:1D:8B:41:60:10:74:72:7F:96:52:B8:11:9C:27
Authority key identifier: 9A:F1:88:A0:4B:B4:5D:4E:E7:4C:44:DC:76:D7:1F:FF:BD:C0:4F:60
Certificate issuer:       /CN=9af188a04bb45d4ee74c44dc76d71fffbdc04f60
Certificate serial:       01978056637B59AABB6C3737699394621A47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
Manifest number:          1597
Signing time:             Wed 18 Jun 2025 00:00:34 +0000
Manifest this update:     Wed 18 Jun 2025 00:00:34 +0000
Manifest next update:     Thu 19 Jun 2025 00:00:34 +0000
Files and hashes:         1: CfUrafygYGSePjcIej3rxMGbJDI.roa (hash: X6AZHbughYjpJFwaVsupdcP3UOvik8OA/b5qiG++R3Q=)
                          2: mvGIoEu0XU7nTETcdtcf_73AT2A.crl (hash: eqT87vbD5CvqyYIbULRmeJsNZMBqYFtJof73NcSguz8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:80:56:63:7b:59:aa:bb:6c:37:37:69:93:94:62:1a:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9af188a04bb45d4ee74c44dc76d71fffbdc04f60
        Validity
            Not Before: Jun 18 00:00:34 2025 GMT
            Not After : Jun 19 00:00:34 2025 GMT
        Subject: CN=90f2f26536e31d8b41601074727f9652b8119c27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8d:4e:ff:77:bc:a9:25:49:1e:58:92:09:75:
                    63:7b:9a:6c:78:ea:96:f6:4e:03:e7:55:43:6f:c6:
                    81:39:43:59:db:b3:1d:26:be:68:a0:ff:fb:6d:8a:
                    71:60:4e:b8:58:86:da:a4:6b:f2:39:44:54:2e:c9:
                    7d:b5:b8:be:82:97:3a:64:01:9d:c0:83:84:34:3b:
                    f1:9c:5f:07:e6:a4:94:00:b1:95:76:1e:de:93:8d:
                    b4:4d:e9:cf:05:bb:52:16:c1:31:15:b6:e2:83:0a:
                    58:49:0d:45:fc:fd:60:ae:83:cd:eb:bb:75:71:49:
                    27:21:12:cd:f4:b0:bd:d6:9e:fb:3b:f0:34:17:68:
                    0b:d2:9f:66:0e:0b:c7:9f:33:96:56:58:07:fc:bd:
                    d8:dc:57:06:f2:f5:0a:f1:53:23:a7:dd:80:4e:b0:
                    40:86:18:82:59:5e:f6:e0:dd:49:66:b6:60:54:89:
                    12:78:12:65:7a:aa:4c:90:84:06:b5:eb:82:82:e2:
                    13:52:4a:04:02:bc:dd:72:23:9c:22:5b:01:24:9a:
                    90:e9:5e:35:ce:9e:e4:45:c6:6c:6e:4c:c1:da:65:
                    4b:f6:8c:d5:94:2d:1c:62:49:5e:e6:fd:cb:ac:b1:
                    92:0e:e2:ab:6b:a6:c0:9b:8f:8b:bb:27:6c:1c:79:
                    fc:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F2:F2:65:36:E3:1D:8B:41:60:10:74:72:7F:96:52:B8:11:9C:27
            X509v3 Authority Key Identifier:
                keyid:9A:F1:88:A0:4B:B4:5D:4E:E7:4C:44:DC:76:D7:1F:FF:BD:C0:4F:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:b5:96:8c:b3:d9:6e:7b:f4:cb:b1:ab:54:2a:01:82:69:d7:
         e9:3a:bc:6d:5a:f4:ad:b8:35:71:4b:13:9e:b8:da:70:75:60:
         e3:14:17:2d:6b:dd:76:ff:33:3a:19:6a:80:f4:2b:82:11:1a:
         8d:06:a2:ed:ee:11:df:d8:6e:8e:2a:33:38:a4:1d:8c:fd:f5:
         7c:28:49:76:a4:00:ee:bf:ee:f6:2d:58:88:00:bd:26:5c:47:
         a2:0f:20:6d:12:2b:fa:47:8a:9b:b3:80:77:f0:d3:77:6f:f7:
         16:a0:04:cd:5d:20:1d:b6:8d:a6:8e:ee:32:2a:5e:b6:1e:12:
         ce:d7:1b:08:63:3f:49:7b:c7:8c:69:6c:b6:4c:17:b1:69:1c:
         b8:82:b8:24:ea:9a:38:41:a2:8f:6a:26:df:2f:f1:a7:94:eb:
         66:f5:69:f6:10:61:76:85:5a:16:2c:e5:ef:fb:19:a7:8a:f3:
         3a:37:ba:77:8d:9c:75:d0:7a:ef:d1:a9:59:03:53:f8:bd:a7:
         94:b4:cd:36:73:57:2f:07:05:a4:52:45:cc:15:36:bc:e7:78:
         cb:70:69:f8:ae:28:c9:45:6f:6a:39:a5:d0:22:02:74:19:46:
         05:d7:43:26:d9:80:fc:1b:07:a2:79:9b:6b:47:e0:9a:ef:38:
         d2:b0:64:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 04:08:53 2025 by rpki-client